Top Cyber Security Jobs

Support and maintain an information system's security posture, implement and enforce security policies, perform vulnerability and risk assessments, manage configuration and changes, and prepare documentation (SSPs, C&A packages, SRTMs) while supporting security authorization processes (NISCAP/DIACAP).

Join the security team to run security operations, monitoring, incident response, application and infrastructure security reviews, bug bounty management, and compliance (SOC 2, ISO 27001, GDPR). Participate in on-call rotations, triage alerts, remediate vulnerabilities (libraries, images, containers), threat model systems, and integrate defensive tooling to protect SaaS and on-prem deployments.

Act as the security lead for assigned product workstreams, embedding security requirements early with Product and Engineering, collaborating across InfoSec and DPO, contributing customer trust materials, and staying current on AI-related security risks to enable secure SaaS product delivery.

Lead product security governance across business units: define frameworks for threat modeling, vulnerability management, regulatory readiness, and supply-chain security; drive cross-functional adoption, metrics, executive reporting, and industry engagement.

Support federal vulnerability management by conducting assessments, driving remediation, maintaining scanners and baselines, performing fix validation, participating in incident response and audits, and producing reports and dashboards to improve security posture and compliance.

Provide security oversight for network and mainframe systems, conduct security auditing, risk assessments and penetration testing, evaluate security architecture, recommend hardware/software, support disaster recovery testing and documentation, and help create and review information security policies and standards.

Design, build, and operate Linero's secure, compliant cloud platform. Own networking, compute, storage, access controls, CI/CD, IaC, observability, and incident response. Embed FedRAMP requirements, run vulnerability management and audits, and establish monitoring, on-call, and operational runbooks to support product teams and enterprise customers.

Lead design and execution of information security controls, risk assessments, and mitigation plans. Serve as SME on security tools and architectures, monitor and respond to threats, support security audits, and present recommendations to stakeholders. Collaborate cross-functionally to ensure compliance with policies and strengthen the company’s security posture.

Contract Security Architect / Penetration Tester to perform security assessments and architecture work. Requires 10+ years IT experience across Windows, Linux, mainframe and web apps, 5+ years with firewalls, load-balancing and LAN/WAN. Strong communication, documentation, presentation, collaboration, and MS Office skills are required. 12+ month remote contract.

Engineer, deploy, and manage enterprise systems and tools (including managed file transfer and Agile tooling). Implement and integrate Axway SecureTransport and MFT solutions with internal and external platforms, administer servers, support network architecture and DNS, create documentation, and collaborate with project managers, engineers, and customers to deliver projects on time and on budget.

Support operation, accreditation, maintenance, and auditing of classified information systems. Prepare and maintain RMF/ATO documentation, perform continuous monitoring, vulnerability scanning, patching, and configuration management. Coordinate with security stakeholders, maintain IS inventory, assist with assured file transfers, and ensure compliance with DAAPM, NISPOM, DISA STIGs, NIST guidance, and related policies.

Perform RMF documentation and compliance activities including eMASS reviews, security control assessments, vulnerability analysis, continuous monitoring support, incident response, contingency planning, and updating risk artifacts. Provide technical reporting to stakeholders and support Navy-specific systems and enterprise networks.

Lead application security for a large-scale cloud-native federal modernization program. Architect and implement Zero Trust and DevSecOps controls, run SAST/DAST and threat modeling, manage ATO activities and POA&Ms, enforce NIST controls and FedRAMP support, drive vulnerability remediation, and advise stakeholders across the SDLC.

Assist senior engineers to design, architect, test, and deploy secure classified network and firewall solutions for USG environments. Implement and harden COTS/GOTS/open-source components, define security requirements and interfaces, coordinate security assessments, support compliance with Federal/DoD/IC guidance, and assist operational monitoring, incident response, and documentation.

Designs and enforces cloud security controls for primarily AWS environments; conducts audits, penetration testing, vulnerability management, incident response, and maintains CSPM, secrets management, and encryption controls while advising leadership on risk.

Implement, install, and configure SIEM (IBM QRadar); perform vulnerability assessments and Qualys scanning; manage assets via Remedy; design and document network/security architecture; work with Cisco and Check Point firewalls and F5 load balancers; ensure PCI compliance and scan processes; train staff on QRadar when needed.

Lead database vulnerability and threat management (VTM) using IBM Guardium for mainframe DB2 and distributed databases. Administer and configure vulnerability tools, schedule scans, assess and risk-rank vulnerabilities, monitor database security, and produce reports and presentations for senior management. Drive VTM strategy and improvements across the agency.

Perform automated and manual penetration tests on applications and infrastructure, assess security controls and network devices, document findings, and support remediation with development teams following industry best practices and frameworks.

Perform security assessments and analysis; design, implement, and deploy security solutions (vulnerability management, anti-malware, IDS/IPS, SIEM, UEBA, network flow monitoring); develop security automation; support application security via static analysis, dependency management, and secure CI/CD; coordinate with global IT to mitigate risks and handle security events and incidents.

Perform security-focused business analysis and documentation to support ISO 27001 compliance: interview SMEs, perform gap analysis, design and edit SOPs and quality control procedures, create process flows/diagrams, and organize content on SharePoint and Clarity.

Designs and implements multi-vendor network security solutions (firewalls, IDS/IPS, proxies, VPNs). Maintains and troubleshoots network security infrastructure, performs packet analysis, evaluates risks, produces process documentation, and supports incident identification and remediation to protect telecommunications and client networks.

Lead embedding security into software delivery by partnering with engineering teams to improve CI/CD security, triage and remediate findings, design secure-by-default patterns, automate security validation and evidence generation, facilitate threat modeling, and provide reusable templates and guidance to reduce risk at scale.

Lead and execute IT compliance audits and risk assessments focused on PCI. Test and document system records, prepare audit plans and written reports, identify root causes, recommend controls, and provide technical guidance and mentoring to audit staff.

Lead cloud security engineering by designing and implementing automated, scalable controls and guardrails for cloud infrastructure. Partner with engineering to deploy security enhancements, investigate incidents, assess third-party integrations and emerging AI tools, and perform threat modeling and architectural security reviews.

Maintain enterprise cyber system security through incident response, advanced forensic and malware analysis, network traffic and packet analysis, signature development, SIEM correlation, and support for internal and external investigations.